
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/EE744ACAD55C11EAA224E026C4F9AE02.roa
File: EE744ACAD55C11EAA224E026C4F9AE02.roa (raw, json)
Hash identifier: Q48uJdRRBErvN0MaEglf3VQ+DumuMDNeFKgsuTsot38=
Subject key identifier: C4:E6:2D:EB:B9:92:A6:75:CC:59:1D:9E:17:EC:F5:16:CB:1A:29:5A
Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Certificate serial: 19D7
Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/EE744ACAD55C11EAA224E026C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:50:50 +0000
ROA not before: Fri 20 Feb 2026 17:14:58 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 45186
IP address blocks: 49.255.255.0/24 maxlen: 24
2402:4600::/40 maxlen: 40
2407:5600::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:45:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6615 (0x19d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE3D, serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Validity
Not Before: Feb 20 17:14:58 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a48a8a-1f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b6:00:73:eb:f2:24:11:ca:3a:3a:ed:57:45:
bb:e7:6b:00:c5:02:e3:71:d0:c5:58:8d:c3:d2:0d:
dd:78:5e:b6:e8:30:4a:6e:88:e0:9e:98:20:a9:46:
8c:12:85:78:6f:dd:c3:1c:ee:ef:73:bc:92:83:22:
c4:14:f4:e4:06:49:20:1b:17:6a:a8:45:ef:26:95:
89:fd:a5:bd:fc:2c:30:d7:92:3a:88:31:2e:c1:72:
c9:16:51:49:73:43:3c:8e:98:6d:53:e5:87:9b:b5:
81:ef:9b:f6:a4:98:71:37:1a:34:8c:a1:1a:28:e5:
c9:1f:b8:ed:09:f3:87:a7:31:84:72:e1:5f:99:75:
88:5e:52:8e:f5:4c:c7:03:c2:ec:37:61:48:0b:75:
9f:47:c9:ad:38:dc:61:3f:e1:c7:df:d5:38:20:11:
0e:0e:a1:8b:61:a3:39:03:b8:8d:a4:1f:2e:27:c8:
2c:f3:3d:9f:b5:a5:7c:71:2f:1c:91:c6:b0:74:42:
1c:54:fa:fc:6c:7d:a5:17:07:bd:e0:b4:d7:f3:2e:
58:36:11:24:50:18:bf:c1:f2:24:53:68:13:90:59:
e0:d7:05:6d:df:33:44:83:bd:86:e0:3f:1e:16:ac:
2e:30:6e:74:4d:a4:d5:2b:de:57:0e:2f:84:54:10:
a1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E6:2D:EB:B9:92:A6:75:CC:59:1D:9E:17:EC:F5:16:CB:1A:29:5A
X509v3 Authority Key Identifier:
keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/EE744ACAD55C11EAA224E026C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
49.255.255.0/24
IPv6:
2402:4600::/40
2407:5600::/32
Signature Algorithm: sha256WithRSAEncryption
1c:e3:09:ba:8d:a2:57:42:c5:c3:e8:46:42:1f:d8:60:e7:12:
20:25:65:d6:86:99:e0:f9:b5:72:b8:32:dc:24:8e:c4:13:4b:
ef:3c:9e:6c:06:4e:20:25:d6:0e:ea:3f:75:56:88:31:36:aa:
b5:be:8c:2f:33:d4:f2:a6:b9:35:1e:e3:2a:53:6d:60:61:b0:
cf:af:10:f2:54:9b:78:07:bc:ef:4b:23:72:d9:a0:4c:6e:4b:
16:fb:ef:d0:ce:48:06:0d:70:c9:0f:e8:c5:73:ee:a8:eb:8b:
f6:a8:d7:e0:e6:b2:5a:7b:e9:5b:64:d2:2c:38:7c:a1:e1:89:
ce:f8:66:07:cb:50:1c:5d:d9:43:52:4b:a7:a0:24:68:47:89:
e6:e0:df:4a:99:a6:6b:2a:c0:91:41:50:df:92:08:fb:cf:dd:
7b:ce:41:c1:f0:e1:d9:92:b8:49:b7:b4:a2:0c:85:36:86:7c:
d5:79:4d:f5:28:19:31:bb:51:29:78:67:01:69:a8:a9:c3:1a:
20:95:73:f3:81:f5:1e:0b:c2:78:ad:c5:14:21:95:66:f8:d3:
9e:49:c9:b2:e3:ed:1d:5b:37:b3:6a:c6:81:c4:ee:f5:af:45:
f4:a0:d1:df:35:99:5c:5e:aa:da:a0:22:ba:ea:51:a2:dd:8e:
74:76:4f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:40:56 2026 by rpki-client